Security rule not work on Business unit level

Summary:

We have TWO Security rule conditions and TWO Polices

EX: Condition 1. Allow company 101(BU1)

 2. Allow company 102(BU2)

we have Two AP Invoice creation custome Job roles and these custome roles add to 2 security policies seperatly 

Then these two roles to add one user and given business unit access for user

User is accessing 102 in distribution combination LOV as user is trying to create invoice for business unit 1(BU1)

so how we can restrict to user not selecting other BU company values?

Content (required):

Version (include the version you are using, if applicable):

23A

Code Snippet (add any code snippets that support your topic, if applicable):